Aggregator

Троян делает скриншоты, считает хэши и заражает инфраструктуру компаний.

印度外包巨头 Infosys 通知员工，警告他们每天工作时间不得超过 9 小时 15 分钟。该公司将监控员工工作时间，此举旨在防止员工工作倦怠，但这与公司联合创始人、英国前首相 Rishi Sunak 的岳父 Narayana Murthy 呼吁印度人每周工作 70 小时的立场相悖。

Online customers around the world are getting ready for huge discounts and unique offers as July 8, the much-anticipated Amazon Prime Day 2025, draws near. However, this global shopping event has also become a prime target for cybercriminals, with over 1,000 newly registered domains mimicking Amazon’s branding detected in June alone. Surge in Phishing Threats […]

The post Over 1,000 Fake Domains Imitating Amazon Prime Day Created to Target Online Shoppers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Владимир Путин подписал закон.

The AiLock ransomware organization, which Zscaler first discovered in March 2025, has become a powerful force in the ransomware-as-a-service (RaaS) market, which is a frightening trend for cybersecurity professionals. This malicious entity operates with a sophisticated structure, leveraging both a negotiation site to extract ransoms from victims and a Data Leak Site (DLS) to threaten […]

The post AiLock Ransomware Emerges with Hybrid Encryption Tactics: ChaCha20 Meets NTRUEncrypt appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

中国电影基金会等组织计划利用AI技术，对包括《警察故事》《黄飞鸿》和《精武门》等在内的 100 部经典功夫影片进行“重焕”。该基金会表示，将与上海灿星文化传媒股份有限公司等企业合作，向 AI 公司授权调用电影素材，以在全球范围内重新推出这些电影，吸引年轻观众。参与功夫片“重焕”项目的官员表示，AI 将用于为电影添加“令人惊叹的真实感”。他们正计划打造“身临其境的观看体验”，例如在竹林决斗，“感受动与静的哲学”。功夫电影的“重焕”将扩展到其他领域，包括创建武术视频游戏。行业观察人士表示，中国重新挖掘经典功夫电影作品的举措是明智的，这些作品多年来一直是美国动作电影的灵感来源。

A vulnerability was found in Essential Addons for Elementor Plugin up to 6.1.19 on WordPress. It has been declared as problematic. This vulnerability affects unknown code of the component Calendar/Business Reviews. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-6244. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Parallels Client. It has been classified as problematic. This affects an unknown part. The manipulation leads to uncontrolled search path. This vulnerability is uniquely identified as CVE-2025-6812. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MongoDB Server up to 8.0.9 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2025-6712. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in MongoDB Server up to 6.0.22/7.0.19/8.0.8 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to excessive iteration. This vulnerability is known as CVE-2025-6714. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in MongoDB Server up to 6.0.21/7.0.19/8.0.6. Affected is an unknown function. The manipulation of the argument mergeCursors leads to improper authorization. This vulnerability is traded as CVE-2025-6713. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in MongoDB Server up to 6.0.20/7.0.17/8.0.4. This issue affects some unknown processing. The manipulation leads to sensitive information in log files. The identification of this vulnerability is CVE-2025-6711. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Ridewill SRL Falls Victim to Qilin Ransomware

A vulnerability classified as critical was found in dagster-webserver Dagster up to 1.0.3. This vulnerability affects unknown code of the file /logs of the component Request Handler. The manipulation leads to path traversal. This vulnerability was named CVE-2023-51232. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in UrlShortener Extension up to 1.42.6/1.43.1 on Mediawiki. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-7056. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.